Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
File: LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft (raw, json)
Hash identifier: RgpOT7NP+mLToNWPJscz1AgIzOf0xU0UIjUwUU+sS+I=
Subject key identifier: EC:06:26:0A:AD:A6:DC:16:90:BD:B8:61:15:41:69:5C:6F:78:94:77
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial: 0198C6ECFF8D8B30B2B322AC92C3A6760166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
Manifest number: 01E0
Signing time: Wed 20 Aug 2025 10:01:17 +0000
Manifest this update: Wed 20 Aug 2025 10:01:17 +0000
Manifest next update: Thu 21 Aug 2025 10:01:17 +0000
Files and hashes: 1: LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl (hash: 3QFeMct91Kdta1Ulk4BZHzqyoGdOaTKyJB5fdzuBwPs=)
2: gH-hksMyjADdSnLZQyC57cd6lrA.roa (hash: hDYDdACy3gd+GmXhVoi6Clu3jpw70AyqVE9omGwk5CE=)
3: w9h083wG9ItaPjH-_63uYE6KznA.roa (hash: V3Tb51WvY6giQH0ElaZuODezIpP/3ZCphM9ap9vb4L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ec:ff:8d:8b:30:b2:b3:22:ac:92:c3:a6:76:01:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Validity
Not Before: Aug 20 10:01:17 2025 GMT
Not After : Aug 21 10:01:17 2025 GMT
Subject: CN=ec06260aada6dc1690bdb8611541695c6f789477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:03:e2:5d:9a:ec:8b:2b:8d:e7:11:cd:29:
fd:31:4b:6e:1c:34:fb:ac:23:65:b2:4c:e9:83:02:
aa:cb:cc:96:d2:ec:47:d9:78:0b:8b:3b:be:b5:94:
8e:df:c9:c5:db:fd:45:65:56:0b:0a:27:86:ea:96:
50:b0:bf:42:74:7f:e4:f5:e9:ad:6c:fa:16:ce:ce:
24:5d:32:80:ce:15:57:85:ca:7a:21:7c:4a:8d:14:
64:ee:09:52:04:f6:bc:f4:be:46:45:11:bb:5b:cd:
44:ba:f5:ee:fc:41:f0:f9:38:cf:48:67:d8:08:98:
8b:14:66:a0:7c:46:5c:89:af:e2:d8:6f:e9:8a:0f:
12:17:ba:68:4f:34:b0:7d:b2:fe:5f:e2:f1:5f:cf:
40:07:7d:d5:f0:96:89:39:54:de:9e:56:95:0f:8f:
91:f5:62:fe:83:f9:03:1c:29:05:b9:5b:b9:05:95:
74:67:ab:30:e7:4a:96:18:01:a8:55:90:b4:e3:cd:
3a:d9:3b:69:55:46:cd:61:e7:ef:da:81:15:b1:c5:
68:b6:f9:54:22:4e:ba:e5:2a:90:64:e5:79:30:b8:
10:03:c2:f0:ca:d7:a4:42:26:c0:e3:46:c3:8a:90:
07:a8:18:3c:04:36:25:4d:39:0c:d0:18:56:60:f9:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:06:26:0A:AD:A6:DC:16:90:BD:B8:61:15:41:69:5C:6F:78:94:77
X509v3 Authority Key Identifier:
keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ad:ea:fa:24:71:f3:55:dc:4d:2a:ac:b0:db:3b:d6:cc:29:
a1:da:45:8d:17:37:32:6e:9f:91:96:0f:80:d8:63:40:00:36:
cc:b7:ce:53:8f:29:f1:2f:0e:1d:14:36:dc:dd:ee:e9:c0:85:
8d:99:a7:88:42:5b:1b:89:77:3e:44:4e:ed:34:9f:fe:96:5b:
77:6d:4a:ae:42:c6:b3:c2:a3:36:54:d3:1a:66:f8:b8:9f:36:
ec:75:d8:91:e2:23:ed:30:86:18:75:24:a3:18:81:59:b0:0b:
4b:4c:28:d4:e3:d2:46:a8:b5:cd:80:e1:c3:0a:61:10:c0:a3:
ba:b9:39:7a:b6:f2:61:da:f2:84:39:9c:2c:8d:bb:29:71:d7:
00:6d:ff:2a:77:c0:54:fd:38:cb:d2:9a:2c:20:cf:1a:39:c1:
0b:e3:ae:08:07:2b:51:18:24:4c:b7:e3:55:b7:2d:4d:e0:87:
63:46:c8:07:2d:ee:97:dc:9c:ca:44:f1:3d:2b:f6:0e:32:16:
77:ca:1c:6d:0b:b9:84:68:a9:1a:c6:9f:ca:43:9e:7b:ec:78:
c9:d2:da:eb:df:66:9f:b1:5a:c7:1d:ba:eb:08:50:9e:ba:04:
70:fb:01:9d:88:06:b8:cf:7d:7a:99:66:92:79:0a:8d:2d:74:
ed:25:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:10:53 2025 by rpki-client